$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.mft File: pb5qRLkApAARc5UWhWBre7U8prI.mft (raw, json) Hash identifier: hnb8ehkBa5ieACbwFvnzYHB8LkvpX2xvNYbE/5OWMGk= Subject key identifier: 82:67:92:9F:C1:A2:EA:41:E9:E8:5D:41:DD:61:F5:95:18:9C:64:DB Authority key identifier: A5:BE:6A:44:B9:00:A4:00:11:73:95:16:85:60:6B:7B:B5:3C:A6:B2 Certificate issuer: /CN=A91E8A41/serialNumber=A5BE6A44B900A4001173951685606B7BB53CA6B2 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pb5qRLkApAARc5UWhWBre7U8prI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.mft Manifest number: 0277 Signing time: Sat 31 May 2025 01:57:02 +0000 Manifest this update: Sat 31 May 2025 01:57:02 +0000 Manifest next update: Sat 07 Jun 2025 01:57:02 +0000 Files and hashes: 1: pb5qRLkApAARc5UWhWBre7U8prI.crl (hash: SQEMUJXWo1nj7L0f3+jo0yWjKTH+eEs9BD5n4lnIE8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.crl rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pb5qRLkApAARc5UWhWBre7U8prI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8A41, serialNumber=A5BE6A44B900A4001173951685606B7BB53CA6B2 Validity Not Before: May 31 01:57:02 2025 GMT Not After : Jun 7 01:57:02 2025 GMT Subject: CN=683a61ee-cd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:16:0c:e1:81:f5:39:fb:e9:1b:cd:1d:52:85: 52:97:95:8c:a6:8f:94:7b:4c:e9:bb:0f:66:d7:b5: f3:d0:22:0a:83:19:bb:ea:4d:bf:11:b9:3d:e5:4d: 23:c6:46:52:39:56:5a:fa:8c:19:76:d4:f1:2f:59: ec:29:8c:19:b3:83:f6:81:a7:3f:4b:0a:da:b6:bf: a1:11:be:2e:49:ba:ab:17:9e:86:67:1d:7c:0a:ae: 41:b8:6c:9a:aa:3b:e6:c6:4a:5e:5d:d2:a1:6d:f1: e4:c4:47:9a:16:00:7d:53:d0:48:a5:b1:b8:5e:a7: 7e:4d:f1:0a:b4:f6:91:e9:3f:69:9f:ed:7d:1c:45: 66:b0:eb:5c:85:65:81:82:dc:d9:ef:27:2c:da:59: 35:6e:9b:42:55:87:c3:17:43:12:05:33:d3:a8:a3: 59:07:84:ab:e1:18:7d:eb:59:c0:61:df:07:84:6d: c1:02:ee:b1:d8:cd:37:ba:ab:ee:7a:7b:39:d0:72: ac:6b:fd:5b:56:5e:3f:0c:b7:e4:a2:b3:1a:55:e3: 00:dc:83:44:2a:f9:07:17:46:c3:c0:df:fa:93:57: be:e9:d5:5d:11:b3:4a:1a:29:5b:1d:82:c9:ca:39: 2e:77:27:a0:72:d0:cc:5c:5d:00:17:e1:e5:86:a0: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:67:92:9F:C1:A2:EA:41:E9:E8:5D:41:DD:61:F5:95:18:9C:64:DB X509v3 Authority Key Identifier: keyid:A5:BE:6A:44:B9:00:A4:00:11:73:95:16:85:60:6B:7B:B5:3C:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pb5qRLkApAARc5UWhWBre7U8prI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8A41/A4742092140411EDB6BE681DC4F9AE02/pb5qRLkApAARc5UWhWBre7U8prI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:45:9b:ac:7c:dd:79:31:f7:3c:ef:34:76:e9:1f:e4:11:be: fe:5e:96:d3:cb:58:8e:50:29:54:bb:96:8c:84:5b:65:5d:4c: ca:b4:7c:48:7b:57:ee:ff:3c:ed:0a:f3:2a:a6:cc:43:bb:4e: b6:0f:56:d2:a4:37:5c:c3:46:83:52:b8:ce:8f:39:7b:10:b7: 92:e4:73:46:ba:4e:c7:39:3e:20:09:e7:b0:62:83:4f:3d:31: f9:56:c3:d9:75:db:a9:ed:ee:0c:4b:f9:74:2c:c5:dc:60:35: 0e:b3:ce:e6:68:b4:f2:ff:84:fc:3d:1e:1e:90:d2:72:93:7e: db:2b:04:6e:c0:77:28:1a:2e:46:1c:68:eb:72:12:a9:d1:4f: c2:3f:1e:85:b9:d3:15:67:f6:46:fc:55:1e:80:cd:ba:07:55: 88:9b:e8:2b:f0:f3:47:d0:1f:ea:72:1f:13:74:3e:2e:1a:c2: e2:a0:28:e2:09:26:b1:9f:29:fd:1c:27:66:7c:61:39:d7:95: d1:6e:ea:58:0c:74:61:e2:16:a8:98:8d:e6:ca:a6:e7:e1:48: 06:a8:5c:04:9a:58:e2:3c:32:95:5c:b4:f0:f7:be:e4:e7:f9: 8a:c7:68:53:e3:4c:43:3d:db:27:1e:44:2b:7d:2c:90:a1:f0: c7:19:7b:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBNDExMTAvBgNVBAUTKEE1QkU2QTQ0QjkwMEE0MDAxMTczOTUxNjg1NjA2QjdC QjUzQ0E2QjIwHhcNMjUwNTMxMDE1NzAyWhcNMjUwNjA3MDE1NzAyWjAYMRYwFAYD VQQDEw02ODNhNjFlZS1jZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hYM4YH1OfvpG80dUoVSl5WMpo+Ue0zpuw9m17Xz0CIKgxm76k2/Ebk95U0j xkZSOVZa+owZdtTxL1nsKYwZs4P2gac/Swratr+hEb4uSbqrF56GZx18Cq5BuGya qjvmxkpeXdKhbfHkxEeaFgB9U9BIpbG4Xqd+TfEKtPaR6T9pn+19HEVmsOtchWWB gtzZ7ycs2lk1bptCVYfDF0MSBTPTqKNZB4Sr4Rh961nAYd8HhG3BAu6x2M03uqvu ens50HKsa/1bVl4/DLfkorMaVeMA3INEKvkHF0bDwN/6k1e+6dVdEbNKGilbHYLJ yjkudyegctDMXF0AF+HlhqBX5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJnkp/B oupB6ehdQd1h9ZUYnGTbMB8GA1UdIwQYMBaAFKW+akS5AKQAEXOVFoVga3u1PKay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEE0MS9BNDc0MjA5MjE0 MDQxMUVEQjZCRTY4MURDNEY5QUUwMi9wYjVxUkxrQXBBQVJjNVVXaFdCcmU3VThw ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BiNXFSTGtBcEFBUmM1VVdoV0JyZTdVOHBySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEE0MS9BNDc0MjA5MjE0MDQxMUVEQjZCRTY4MURDNEY5QUUwMi9wYjVxUkxrQXBB QVJjNVVXaFdCcmU3VThwckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVRZusfN15Mfc87zR26R/kEb7+XpbTy1iOUClUu5aMhFtlXUzKtHxI e1fu/zztCvMqpsxDu062D1bSpDdcw0aDUrjOjzl7ELeS5HNGuk7HOT4gCeewYoNP PTH5VsPZddup7e4MS/l0LMXcYDUOs87maLTy/4T8PR4ekNJyk37bKwRuwHcoGi5G HGjrchKp0U/CPx6FudMVZ/ZG/FUegM26B1WIm+gr8PNH0B/qch8TdD4uGsLioCji CSaxnyn9HCdmfGE515XRbupYDHRh4haomI3myqbn4UgGqFwEmljiPDKVXLTw977k 5/mKx2hT40xDPdsnHkQrfSyQofDHGXt7 -----END CERTIFICATE-----Generated at Sat May 31 15:31:49 2025 by rpki-client